Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001144.00000000.137143.02660000.00000004.mdmp") Found URL "http://defaultcontainer/_rels.relspackhttp://defaultcontainer/%@,?packpacksiteoforigin:///siteoforigin:///siteoforigin:,,,pack://siteoforigin:,,,packsiteoforigin:,,,pack://siteoforigin:,,,/pack://siteoforigin:,,,/packapplicationapplication://application:///application:///application:,,,pack://application:,,,packapplication:,,,pack://application:,,,/pack://application:,,,/packdependencyproperty.unsetvaluea" - Source: "00000000-00001144.00000000.137143.04910000.00000004.mdmp") Found URL "http://user.configfile:.configfile://datadirectoryfile:c:\program" - Source: "00000000-00001144.00000000.137143.04910000.00000004.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=42127" - Source: "00000000-00001144.00000000.137143.04910000.00000004.mdmp") Found URL "http://www.w3.org/2000/09/xmldsig" - Source: "00000000-00001144.00000000.137143.04910000.00000004.mdmp") Found URL "http://logging.apache.org/log4net/release/faq.html" - Source: "00000000-00001144.00000000.137143.072B2000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningnable" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningaluehe" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2acceleratorkeypressedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2basicauthenticationrequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2basicauthenticationresponse" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2browserextension" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2browserprocessexitedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2certificate" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2clientcertificate" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2clientcertificaterequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2compositioncontroller" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2contentloadingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2contextmenuitem" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2contextmenurequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2contextmenutarget" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2controller" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2controlleroptions" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2cookie" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2cookiemanager" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2domcontentloadedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2deferral" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2devtoolsprotocoleventreceivedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2devtoolsprotocoleventreceiver" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2downloadoperation" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2downloadstartingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2environment" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningreatecorewebview2controlleroptions" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2environmentoptions" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2executescriptresult" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2file" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2filesystemhandle" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2find" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2findoptions" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2frame" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2framecreatedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2frameinfo" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2httpheaderscollectioniterator" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2httprequestheaders" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2httpresponseheaders" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2launchingexternalurischemeeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2movefocusrequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2navigationcompletedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2navigationstartingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2newwindowrequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2nonclientregionchangedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2notification" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2notificationreceivedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2permissionrequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2permissionsetting" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2pointerinfo" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2printsettings" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2privatehostobjectasyncmethodcontinuation" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2privatehostobjecthelper" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2privatekeypressedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2privateremoteobjectproxy" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2processextendedinfo" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2processfailedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2processinfo" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2profile" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2saveasuishowingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2savefilesecuritycheckstartingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2screencapturestartingeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2scriptdialogopeningeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2scriptexception" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2servercertificateerrordetectedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2settings" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2sharedbuffer" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2sourcechangedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webmessagereceivedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webresourcerequest" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webresourcerequestedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webresourceresponse" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webresourceresponsereceivedeventargs" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2webresourceresponseview" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "https://learn.microsoft.com/microsoft-edge/webview2/concepts/versioningorewebview2windowfeatures" - Source: "00000000-00001144.00000000.137143.07522000.00000002.mdmp") Found URL "http://chengxin1.vip/api/registersafd" - Source: "00000000-00004072.00000000.129556.0B460000.00000004.mdmp") Found URL "http://127.0.0.1:18888';" - Source: "00000000-00004072.00000000.129556.0B460000.00000004.mdmp") Found URL "http://chengxin1.vip/api/registerremoteagent/1.0zesid*w>4)w94kernel32.dll" - Source: "00000000-00004072.00000000.129556.0B460000.00000004.mdmp") Found URL "http://chengxin1.vip/api/registeruser-agentremoteagent/1.0ts" - Source: "00000000-00004072.00000000.129556.0B460000.00000004.mdmp") Found URL "http://127.0.0.1:18888';" - Source: "00000000-00004072.00000001.131475.0B460000.00000004.mdmp") Found URL "http://chengxin1.vip/api/registerzesidister*w>4remoteagent/1.0)w94kernel32.dll" - Source: "00000000-00004072.00000001.131475.0B460000.00000004.mdmp") Found URL "http://chengxin1.vip/chengxin1.vipchengxin1.vipchengxin1.vip36,50808chen].vipchengxin1.vip236,50808safd" - Source: "00000000-00004072.00000001.131475.0B4C4000.00000004.mdmp") Found URL "http://chengxin1.vip/api/register23.224.194.3123.224.194.31chengxin1.vipchengxin1.vip23.224.194.31chengxin1.vip23.224.194.31chengxin1.vipttp://chengxin1.vip/api/register:\windows\system32\jsproxy.dllttp://23.224.194.31/api/register:\windows\system32\jsproxy.dllttp://chengxin1.vip/api/register:\windows\system32\jsproxy.dllttp://chengxin1.vip/api/registerttp://chengxin1.vip/api/registerttp://chengxin1.vip/api/register4.31/api/registerttp://chengxin1.vip/api/registerttp://chengxin1.vip/api/register/chengxin1.vip/api/register:\windows\system32\ondemandconnroutehelper.dll:\windows\system32\ondemandconnroutehelper.dllehelper.dll:\windows\system32\ondemandconnroutehelper.dllhttp://23.224.194.31/23.224.194.31http://23.chengxin1.vipwns.notify.traengxchengxin1.vipdesktop-fvvf82achengxin1.vipchengxin1.vipdesktop-fvvf82adesktop-fvvf82adesktop-fvvf82achengxin1.vipdesktop-fvvf82achengxin1.vipchengxin1.vipchengxin1.vipchengxin1.vipaeeeqqqqqqqqqqqqqqqq4w\.'xlw\vow\uhconaaaatw]owutghmenuriofvvf82aurio<" - Source: "00000000-00004072.00000001.131475.0B4C4000.00000004.mdmp") Found URL "http://chengxin1.vip/api/registerschannel" - Source: "00000000-00004072.00000001.131475.0B4C4000.00000004.mdmp") Found URL "http://127.0.0.1:18888';" - Source: "00000000-00004072.00000001.131475.2F551000.00000002.mdmp") Found URL "http://23.224.194.31/api/registerant\vcr:\programdata\gigabyte\gigabytedownloadassistant\qbcore.dllvm_symlus\apy:\windows\system32\advapi32.dll\apu\prouommonprogramfiles(x86)=c:\program" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://23.224.194.31/gssapiapi/registerapi/registerapi/register94.31chengxin1.vipchengxin1.vip23.224.194.31chengxin1.vipchengxin1.vip23.224.194.3123.224.194.31chengxin1.vipsafd" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://23.224.194.31/23.224.194.31http://23.224.194.31/23.224.194.31t" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://23.chengxin" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://che224.194.31/23.224.194.3194.313.224.194.3schengxin1.vipchengxin1.vipapubwsvw]msw\iqw\ksw]hgw\" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://127.0.0.1:18888';" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://23.224.194.31/api/register)w94kernel32.dll" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://23.224.194.31/api/registerschannel" - Source: "00000000-00004072.00000002.133397.0B460000.00000004.mdmp") Found URL "http://localhost:%d/openopenshowsavedlgdownloaddisabledownloaddownloadsavepathdownloadatltracedbclientatltracedbproviderappidclsidcomponent" - Source: "00000000-00004072.00000002.133397.DE3FA000.00000002.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00004512.00000000.134217.02A90000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0-%3_j=sm" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;greater" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.9iqmgvw,czcthawte," - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?e-ohnpkcsmicrosoft.powershell.security2.5.29.10lambda_method2.5.29.12.5.4.3globalsign" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl01.3.6.1.4.1.311.10.1120531151137z0/^g(o-cejy" - Source: "00000000-00006588.00000001.133054.00820000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0y,mbrmnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00006588.00000001.133054.070A2000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00006588.00000001.133054.070A2000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00006588.00000001.133054.070A2000.00000004.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportdefenderdefender07.18022.12.17007.18022scanws\system32threatsnderard\nprotet" - Source: "00000000-00006588.00000001.133054.08A40000.00000004.mdmp") Found URL "http://crl.micro/pki/crl/products/miccodsigpca_08-31-2010.crl0zn0l0j>http://www.microsoft.com/pki/-c4" - Source: "00000000-00006588.00000001.133054.08A40000.00000004.mdmp") Found URL "http://www.microsoft.com/powershell" - Source: "00000000-00006588.00000001.133054.08A40000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=74409&enterprise=%ls%dhttps://go.microsoft.com/fwlink/?linkid=74408&enterprise=https://go.microsoft.com/fwlink/?linkid=37020&name=%s&threatid=%u&enterprise=%dpynetsubmitsamplesconsentspynetreportingpclient_public_commodempclient_allowadminelevationacquirepclient_noforcedreboot\?\volume" - Source: "00000000-00006588.00000001.133054.6E4B1000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=851034&clcid=0x409&httpsigupdate_baseurlforceupdatefrommusignaturedisablenotificationcloudbasedbehaviorblockingsignaturecategoryiddisablescheduledsignatureupdateonbatterysignatureupdatecatchupintervalsignatureslastcheckednissignatureslastupdateddeltaupdatefailurenissignatureversionnissignaturelocation%mpconfig_productappdatapath%\definition" - Source: "00000000-00006588.00000001.133054.6E4B1000.00000020.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportspynetreportinglocationlocalsettingoverridesubmitsamplesconsentdisableblockatfirstseenheartbeatdelayindaysheartbeatsamplingratessloptionsbypassinternetcheckmapslatencyretrytimeoutthreatseveritydefaultactionemptykeyvaluedisableprivacymode%mpconfig_productappdatapath%\telemetryallowuseruiaccessuilockdownnotification_suppresssuppressrebootnotificationsuppresswdonotificationmpconfig_productcodenamempconfig_productpathmpconfig_productappdatapathmpconfig_productuserappdatapathmpconfig_appdataroot12345678-f0f0-4f3f-b1f3-41cd1905616empconfig_reportingguid\msmplics.dllpconfigut-53e7e780-2330-40c6-94c6-be75e946e933software\microsoft\removaltools\mrtguidfalsemp_config_type_szmp_config_type_dwordmp_config_type_multi_szmp_config_type_binarymp_config_type_nonemp_config_origin_nonemp_config_origin_defaultmp_config_origin_preferencesmp_config_origin_mdm_policymp_config_origin_policy*sof**eof*t%uh%um%uspt%uhp%udp%udt%uh2000-01-01t%02u:%02u:%02umpclient_nouseunifiedschedulingenginelocalsystem2100-01-01t00:00:00d:(a;;fa;;;sy)(a;;frfx;;;ls)maintenanceregularmicrosoft\windows\windows" - Source: "00000000-00006588.00000001.133054.6E4B1000.00000020.mdmp") Found URL "http://www.validationtest.contoso.com/test%d.htmlmpoav_forcedeepscan" - Source: "00000000-00006588.00000001.133054.6EB21000.00000020.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0-%3_j=sm" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;greater" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.9iqmgvw,czcthawte," - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?e-ohnpkcsmicrosoft.powershell.security2.5.29.10lambda_method2.5.29.12.5.4.3globalsign" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl01.3.6.1.4.1.311.10.1120531151137z0/^g(o-cejy" - Source: "00000000-00006588.00000002.133884.00820000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0y,mbrmnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00006588.00000002.133884.070A2000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00006588.00000002.133884.070A2000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00006588.00000002.133884.070A2000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt06" - Source: "00000000-00006588.00000002.133884.084EF000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0oftjmeowx\*$meowx\*$meowx\*$" - Source: "00000000-00006588.00000002.133884.084EF000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/p8gvp\gvpedva" - Source: "00000000-00006588.00000002.133884.084EF000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20windows%20third%20party%20component%20ca%202014.crl0u0s0qehttp://www.microsoft.com/pkiops/certs/microsoft%20windows%20third%20party%20component%20ca%202014.crt0" - Source: "00000000-00006944.00000000.134542.02C90000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htm0o0m0kehttp://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt0t,7die'?s" - Source: "00000000-00006944.00000000.134542.02C90000.00000004.mdmp") Found URL "https://www.microsoft.com/en-us/windows" - Source: "00000000-00006944.00000000.134542.02C90000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0jds_k(ker[rasg" - Source: "00000000-00006944.00000000.134542.02C90000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?ee:j9aeeexqqqqqqqqqqqqqqqqswashington1redmond1microsoft" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0-%3_j=sm" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.9iqmgvw,czcdigicert" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;washington1redmond1microsoft" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*ldigicert" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.u@)0'0%ql" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0root" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?!m5c3il" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*lcertplus1class" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.securetrust.com/stca.crl0x:rr[" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.comodoca.com/aaacertificateservices.crl060http://crl.comodo.net/aaacertificateservices.crl0l7u" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/microsoft%20windows%20third%20party%20component%20ca%202014.crl0u0s0qehttp://www.microsoft.com/pkiops/certs/microsoft%20windows%20third%20party%20component%20ca%202014.crt0" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0jds_k(ker[rasg" - Source: "00000000-00006944.00000000.134542.02CD3000.00000004.mdmp") Found URL "https://www.microsoft.com/en-us/windows" - Source: "00000000-00006944.00000000.134542.02F80000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0jds_k(ker[rasg" - Source: "00000000-00006944.00000000.134542.02F80000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00006944.00000000.134542.02F80000.00000004.mdmp")